Privacy and data breaches

Any loss of control over stored personal data constitutes a potential data leak. In most cases this concerns stolen (or lost) digital files, but a stolen (or mislaid) printed list containing personal data also represents a data leak. It is important that you report any data leak.

What is a data leak?

Any loss of control over stored personal data constitutes a potential data leak. In most cases this concerns stolen digital files, but a stolen printed list containing personal data also represents a data leak. Examples of data leaks include:

the loss of a USB stick containing students’ transcripts

the loss of a password reminder written on a note stuck to the underside of your keyboard

a stolen laptop

the loss of personal data without having made a backup, for example the loss of a set of recent examination papers

Reporting a data leak

If personal data falls into unauthorised hands, Leiden University is legally obliged to report such a data leak to the Data Protection Authority within 72 hours. In the event of a data leak, report this as soon as possible to the ISSC Helpdesk (tel. 8888).